To fix the cross-site post submission bug.

content/browser/renderer_host/render_view_host_impl.cc

Index: content/browser/renderer_host/render_view_host_impl.cc
diff --git a/content/browser/renderer_host/render_view_host_impl.cc b/content/browser/renderer_host/render_view_host_impl.cc
index a993a0a4f5da1bc885022e534e457434e89ffe6b..9c0333e57c05ad5fc8f3cf99496dc978103f43b7 100644
--- a/content/browser/renderer_host/render_view_host_impl.cc
+++ b/content/browser/renderer_host/render_view_host_impl.cc
@@ -1000,6 +1000,7 @@ bool RenderViewHostImpl::OnMessageReceived(const IPC::Message& msg) {
     IPC_MESSAGE_HANDLER(ViewHostMsg_ToggleFullscreen,
                         OnMsgToggleFullscreen)
     IPC_MESSAGE_HANDLER(ViewHostMsg_OpenURL, OnMsgOpenURL)
+    IPC_MESSAGE_HANDLER(ViewHostMsg_OpenPostURL, OnMsgOpenPostURL)
     IPC_MESSAGE_HANDLER(ViewHostMsg_DidContentsPreferredSizeChange,
                         OnMsgDidContentsPreferredSizeChange)
     IPC_MESSAGE_HANDLER(ViewHostMsg_DidChangeScrollbarsForMainFrame,
@@ -1375,6 +1376,19 @@ void RenderViewHostImpl::OnMsgOpenURL(const GURL& url,
       this, validated_url, referrer, disposition, source_frame_id);
 }
 
+void RenderViewHostImpl::OnMsgOpenPostURL(const GURL& url,
+                                          const content::Referrer& referrer,
+                                          WindowOpenDisposition disposition,
+                                          int64 source_frame_id,
+                                          const ViewMsg_Request& request) {
+  GURL validated_url(url);
+  FilterURL(ChildProcessSecurityPolicyImpl::GetInstance(),
+            GetProcess(), false, &validated_url);
+
+  delegate_->RequestOpenPostURL(
+      this, validated_url, referrer, disposition, source_frame_id, request);
+}
+
 void RenderViewHostImpl::OnMsgDidContentsPreferredSizeChange(
     const gfx::Size& new_size) {
   delegate_->UpdatePreferredSize(new_size);